activation-helper: Ensure DBUS_STARTER_ADDRESS is set correctly
authorGeoffrey Thomas <gthomas@mokafive.com>
Fri, 28 Sep 2012 05:02:06 +0000 (22:02 -0700)
committerSimon McVittie <simon.mcvittie@collabora.co.uk>
Tue, 2 Oct 2012 08:24:27 +0000 (09:24 +0100)
commitc5c747dd7613d777a05ddb663409eeea4e61ec74
tree6f50fa10730ed88e47a314812194355e7b3ca2af
parentb3800b7a666fcefc37eeb25a030241d5809a7246
activation-helper: Ensure DBUS_STARTER_ADDRESS is set correctly

The fix for CVE-2012-3524 filters out all environment variables if
libdbus is used from a setuid program, to prevent various spoofing
attacks.

Unfortunately, the activation helper is a setuid program linking
libdbus, and this creates a regression for launched programs using
DBUS_STARTER_ADDRESS, since it will no longer exist.

Fix this by hardcoding the starter address to the default system bus
address.

Signed-off-by: Geoffrey Thomas <gthomas@mokafive.com>
Signed-off-by: Colin Walters <walters@verbum.org>
bus/activation-helper.c